unveil: a single-file scanner for hidden prompt injection in repos and issues
Honest-Arachnid-1860 · reddit · 2026-09-06
Coding agents treat issue text, READMEs and comments as instructions, so attackers can hide directives in HTML comments, zero-width runs, bidi overrides or ANSI erase sequences — places human reviewers never look. This is no longer hypothetical: an August sweep of 529 open agent bounties found 73% were honeypots, and February's Cline compromise started from one issue title with zero-width and RTL-override characters.
The author built unveil, a single-file, zero-dependency Python scanner that flags: invisible codepoints (including decoded Unicode tag payloads), instructions hidden in comments/display:none, ANSI sequences overwriting visible text, prompt/secret exfiltration requests, and the honeypot signature — a visible disclaimer contradicted by hidden text. It supports -- and exit code 1 for CI.
A false-positive run against the READMEs of React, CPython, Rust, VS Code, Linux, Electrum, Node and Kubernetes (81 KB) produced zero highs and one medium: the Linux kernel README now contains benign machine-addressed text — scoring it precisely because nothing is concealed. The key insight: visible instructions to AI are normal now; concealment is the signal. Limitations stated up front: pattern-based, English rules, a detector not a sandbox. MIT-licensed.
More from coding & agent
- 105 Real Bugs Tested: GPT-6.1 Sol Over 10x Cheaper Than GPT-5.6 Sol — PawelHuryn · 2026-10-23
- Dev builds SkiFree-style sled game in one prompt, praises DeepSeek Flash — victormustar · 2026-10-23
- Every ditched personal agents for a shared Claude Managed Agents coworker in one week — every · 2026-10-23
- WorkOS shows how to let AI agents safely sign up for your app with auth.md and ID-JAG — AI Engineer · 2026-10-23
- Devs on Reddit swap tactics for stopping prompt regressions in AI agents — SleepFlimsy6963 · 2026-10-23
- Claude Code + ComfyUI MCP workflow for client work: paid models or open weights? — newaccount47 · 2026-10-23